Extracted

• • Target

    646-1-0x00008000-0x0002a768-memory.dmp

  • Size

    93KB

  • MD5

    2e62f132c44901517eb0af09e8d17634

  • SHA1

    b8f51f6c1552712e5c555ed69319bf5f4c590aa7

  • SHA256

    99571a1a1d56ed926fa59b2ec7b3460e5ae2d515b8ac93ce5f9664fec12370d2

  • SHA512

    2e528d5522ad2b96c7ea1d075b242b59caae6c61e491d9790168336a764efbcbb65c8222a70750b960283c356546903c5453af8666dcbeedbedc71b3d40e402b

  • SSDEEP

    1536:66nDIHMx4eoSl5wxqHuVObswX9htnyFI/hahF50Oe5U34BellcriAbDVo8Y7wjFM:IsxXozxIu65zx/hahF50OePpbDVo8fj2

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1